UNSOLVED

mr jingles ....

updated

18 years ago

0

4119

March 1st, 2009 01:00

qqlf.exe

hi my brother has this virus on his computer ive told him to try combofix and Microsoft Windows Malicious Software Removal Tool but just wanted to know if you know anything about this virus for people in the future it says on the net it comes with a ecard through email ?? thanks in advance

  • Bugbatter

    4 Apprentice

    •

    20487 Posts

    179

    0

    Posted March 1st, 2009 05:00

    I  see some references to that file by doing a search on Google:

    http://www.google.com/search?q=qqlf.exe&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a

    Please note that Combofix should NEVER be run unless requested by someone trained in its use. Only someone like that is aware of any problems that you might run into with the tool and knows how to advise on recovering from them.

    I suggest trying running Malwarebytes' Anti-Malware.
    Please download to your desktop Malwarebytes' Anti-Malware from Here or Here

    Double Click mbam-setup.exe to install the application.

    • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Press the OK button to close that box and continue.
    • If you encounter any problems while downloading the updates,
    • manually download them from here
      and just double-click on mbam-rules.exe to install.
      Alternatively, you can update through MBAM's interface from a clean computer,
      copy the definitions (rules.ref) located in
      C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes'
      Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.
    • Once the program has loaded, select "Perform Quick Scan"; then click Scan.
    • The scan may take some time to finish,so please be patient.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Make sure that everything is checkedPhotobucket
      Click Remove Selected.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
    • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    • If you are still having problems and/or would like a follow-up check to be sure the infection as well as vulnerabilities are gone, copy and paste the entire report into a New Message on the Malware Removal forum. Also include a fresh HijackThis log. Instructions for downloading HijackThis are at the top of that forum.

      1. Just click the Start A New Thread button (upper right) in the Malware Removal forum HERE
      to start your own thread requesting assistance for a follow-up check to be sure the malware is gone.

      2. In the discussion window that opens, simply Right-Click and select Paste.

      Extra Notes:
      If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer, please do so immediately.


      * If you are unable to download or install MBAM on your computer, see if you can use a friend's or family member's computer to download MBAM. Use this update link here to manually download the update. Once downloaded, rename the program installer "mbam-setup.exe" file to something else like "catchjunk.exe". Copy the installer file and the update file to your CD or flash drive. Transfer the file to the infected computer. Install the "catchjunk.exe" file, then run the update so that you will have the current definitions. After that, run a full system scan and select to have the program REMOVE whatever it finds.

       

      -- MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes (like Spybot's Teatimer), they may interfere with the fix or alert you after scanning with MBAM. Please disable such programs until disinfection is complete or permit them to allow the changes.